Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: y6ROqvcAr2TfsZHcP9HQFzRjEs/3vyqiLHzrg5REqAA=
Subject key identifier: 7D:57:EB:7E:37:CF:0E:85:9C:7C:F0:7F:FF:3F:2C:FE:2C:2B:E1:C9
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019EC44A72C6385343B3F142615479DC3EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 10D7
Signing time: Sun 14 Jun 2026 04:01:13 +0000
Manifest this update: Sun 14 Jun 2026 04:01:13 +0000
Manifest next update: Mon 15 Jun 2026 04:01:13 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: drLpe4Ujj9wWWvHbwTEtD9QpQsJJ5JvmriuTKYuROYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:72:c6:38:53:43:b3:f1:42:61:54:79:dc:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Jun 14 04:01:13 2026 GMT
Not After : Jun 15 04:01:13 2026 GMT
Subject: CN=7d57eb7e37cf0e859c7cf07fff3f2cfe2c2be1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:b6:fe:72:f0:93:86:3f:f9:b7:63:4e:de:
7b:f7:46:c2:00:64:f3:e2:33:b6:9b:31:8c:1a:49:
11:fe:15:bf:81:71:bd:45:7e:fd:df:b4:04:d1:a8:
19:46:2d:a0:09:16:7a:e6:c8:25:a0:60:73:2e:2c:
18:22:aa:01:16:a3:64:2d:73:22:f3:1e:35:f4:02:
ff:36:6e:6f:db:17:6a:7e:35:ac:e5:94:2e:c9:79:
34:cd:86:98:7f:34:c9:39:ff:02:38:a7:fc:30:cf:
23:75:f6:dc:95:02:88:51:f5:ae:2a:30:47:7e:b6:
9d:55:df:4d:c1:9b:0e:a5:f7:9e:9f:70:35:a1:ad:
35:6c:30:b2:aa:6e:32:23:db:ae:7e:e0:f6:b9:7d:
28:b2:cd:11:88:f3:09:e2:ca:5c:cd:43:e6:80:9e:
02:52:71:67:82:d2:88:05:b8:24:04:11:2f:83:d6:
d4:72:b3:4b:5e:2b:1a:2a:53:df:1a:f7:f4:5d:88:
71:7d:75:58:02:10:ab:41:40:1d:ef:07:c1:9f:b0:
34:da:b1:82:04:da:31:06:0d:ab:c7:6f:26:99:e9:
12:22:f4:69:3e:06:4c:bb:c1:e4:c0:29:3e:7e:69:
29:17:56:7a:45:9c:db:20:90:c7:c9:67:0a:12:33:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:EB:7E:37:CF:0E:85:9C:7C:F0:7F:FF:3F:2C:FE:2C:2B:E1:C9
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0b:79:57:77:be:4b:63:ff:c6:a4:6e:23:11:a6:dc:4b:6e:
87:e9:fa:e9:5f:c4:10:ef:fb:13:4b:28:03:d1:12:77:65:59:
24:22:6a:03:74:86:0d:f8:22:ca:d2:7d:fa:64:25:1d:1a:d0:
cb:d6:70:59:52:b9:f7:9c:c9:ff:b7:c1:00:7a:71:7b:38:d4:
45:0c:3f:6c:50:af:ce:5a:0e:c6:53:03:6a:6e:c4:77:99:08:
16:9f:5d:ee:1e:44:d4:ce:96:44:98:6c:d2:97:7b:fe:f5:e8:
18:98:f4:0e:4d:d9:6b:0b:b7:c9:84:2f:a7:7b:b6:ec:8e:6e:
74:dc:04:4c:b0:e3:6e:33:f3:fb:5f:07:34:87:e9:bb:36:65:
a4:57:b5:05:0c:7b:69:63:80:c1:4f:65:78:ce:79:d2:73:ad:
c0:0d:59:6f:29:40:6b:8c:9e:e3:06:1d:d7:37:d1:e0:ec:98:
a9:df:92:36:59:26:a1:71:8a:08:64:e4:5a:6d:5c:df:c9:50:
11:8e:00:8b:f1:9b:5a:ec:d9:28:cf:23:4f:21:11:d6:4d:25:
a6:1a:a4:35:d7:20:88:2c:35:3d:4e:8a:2e:23:b2:1f:8f:5a:
55:1c:0b:bd:a8:b4:58:c2:8c:6d:e3:b9:18:bd:8a:19:6c:71:
31:b8:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:54 2026 by rpki-client